NEAS[.]a0845e0bc1549f5100152c09d93f8260[.]exe

General

Target

NEAS.a0845e0bc1549f5100152c09d93f8260.exe
Size

508KB
MD5

a0845e0bc1549f5100152c09d93f8260
SHA1

9a7ab8a72783911a2fcd55e15434d7efc1464273
SHA256

364beec5bda03699b1ab79d4ffacccbc4907004e98fc0431fed90f71a09cdf5c
SHA512

83f6262f046f1743e0ca89ed92cb75f5d377bb77d5217b8243437a325b51391112c661996f8affc0f7cac35f240171597eb4febb13225b0d05af3e9a6abb4324
SSDEEP

6144:FzNVXOC+CtRIcGe+95agUXufeSTkHQG+pOKOuSX86JEY8cvj:FzXXyCwr9wgJeShG+pOKHotJEBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0845e0bc1549f5100152c09d93f8260.exe

Files

NEAS.a0845e0bc1549f5100152c09d93f8260.exe
.dll windows:4 windows x86

3553fb3ffd3519e62eb72aa966e9c4f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

perl56

Perl_croak
Perl_Isv_yes_ptr
Perl_form
Perl_newXS
Perl_push_scope
Perl_sv_2nv
Perl_sv_isobject
Perl_Ttmps_ix_ptr
Perl_Ttmps_floor_ptr
Perl_save_int
Perl_call_method
Perl_Tmarkstack_max_ptr
Perl_markstack_grow
Perl_pop_scope
Perl_TSv_ptr
Perl_free_tmps
Perl_Tstack_max_ptr
Perl_safesysmalloc
Perl_safesysfree
Perl_sv_setiv
Perl_stack_grow
Perl_newSViv
Perl_sv_2mortal
Perl_sv_derived_from
Perl_newSVpv
Perl_sv_setpv
Perl_croak_nocontext
Perl_get_sv
Perl_get_context
Perl_sv_2io
Perl_sv_setref_pv
Perl_Tstack_base_ptr
Perl_Tstack_sp_ptr
Perl_Tmarkstack_ptr_ptr
Perl_mg_set
Perl_sv_2pv
Perl_Tna_ptr
Perl_sv_newmortal
Perl_sv_setnv
Perl_Tcurpad_ptr
Perl_sv_2iv
Perl_Top_ptr

msvcrt

malloc
abs
_ftol
gmtime
_CIpow
strtod
_initterm
fopen
_adjust_fdiv
strncpy
memmove
fclose
strncmp
ftell
getenv
putc
fread
fseek
strcpy
sin
fwrite
sprintf
strcat
cos
fflush
exit
printf
_setjmp3
memset
longjmp
realloc
qsort
memcpy
strchr
atoi
fgets
sscanf
_iob
strcmp
_errno
free
calloc
getc
floor
strlen
fprintf

kernel32

DisableThreadLibraryCalls

Exports

Exports

_boot_GD
boot_GD

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3553fb3ffd3519e62eb72aa966e9c4f5

Headers

File Characteristics

Imports

perl56

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 336KB - Virtual size: 335KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 148KB - Virtual size: 147KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 336KB - Virtual size: 335KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 148KB - Virtual size: 147KB

.reloc
Size: 8KB - Virtual size: 6KB